PT-2026-90459

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: bound the device-reported response length nsm sendrecv msg locked stores the virtqueue used-ring length reported by the NSM device into msg-resp.len without bounding it to the response buffer. A malicious or buggy...

PT-2026-90092

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cache info cache segs init iterates cache info-n segs times indexing cache-segments, which is sized to the cache device geometry, and get seg id takes each segment id from the...

PT-2026-90416

In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in listener set nfsd sock nl policy declares NFSD A SOCK ADDR as a bare NLA BINARY attribute with no minimum length. A CAP NET ADMIN caller can send a 16-byte NFSD A SOCK ADDR with sa...

PT-2026-90442

In the Linux kernel, the following vulnerability has been resolved: lib/ucs2 string.c: fix out-of-bounds read in ucs2 strnlen Patch series "lib/ucs2 string.c: fix out-of-bounds read in ucs2 strnlen", v2. This series fixes an off-by-one out-of-bounds read in ucs2 strnlen. The first patch is the re...

PT-2026-90240

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets ath6kl cfg80211 connect event subtracts fixed IE offsets from assoc req len -= 4 and assoc resp len -= 6, both u8, with no lower bound. The aggregat...

PT-2026-90174

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasd int handler completes an NRF read of an unallocated ESE track by calling ese read and unconditionally marking the request DASD CQR SUCCESS. dasd eckd ese read can...

PT-2026-90088

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cache replay, the writeback worker and the GC worker bounds its length by PCACHE SEG SIZE - seg off, the raw segment size rather than the data...

PT-2026-90210

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlm mig lockres handler A node receiving a DLM MIG LOCKRES message trusts several fields of the peer-supplied dlm migratable lockres without validation. num locks and lockname len are bounded only on th...

PT-2026-90089

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset cache pos decode takes the persisted key tail and dirty tail seg off from the cache device and addresses within the segment with it. A seg off at or past the segment data size,...

PT-2026-90253

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss krb5 verify mic v2 gss krb5 verify mic v2 reads the token ID at ptr0..1, the flags byte at ptr2, and padding at ptr3..7, then passes ptr + GSS KRB5 TOK HDR LEN and cksum len to gss...

PT-2026-90272

In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elf validity cache sechdrs, section sizes and offsets are validated, unless the section type is SHT NULL or SHT NOBITS. Later, elf validity cache secstrings and elf validity cache...

PT-2026-90304

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In ghes handle arm hw error, after skipping the cper sec proc arm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeofe...

PT-2026-90258

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss krb5 unwrap v2 against short tokens gss krb5 unwrap v2 reads the EC and RRC header fields at ptr+4 and ptr+6 before validating that the token is at least GSS KRB5 TOK HDR LEN 16 bytes long, and its rotate left...

PT-2026-90437

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range max register The PHY register block is 64KB, so with a register stride of 4 the last accessible register sits at offset 0xfffc. max register names 0x10000, one register past the end o...

Debian dsa-6493 : libevent-2.1-7t64 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6493 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6493-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-89160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject. CVE-2026-89160 Note that Nessus relie...

Linux Distros Unpatched Vulnerability : CVE-2026-79522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in the gfdmgetchunkdata function src/utils/downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a...

AlmaLinux 9 : kernel (ALSA-2026:64808)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64808 advisory. kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : libEBML vulnerability (USN-8746-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8746-1 advisory. It was discovered that libEBML incorrectly handled certain read and write operations. An attacker could possibly use this issue to cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-79514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in the gfdmdatareceived function downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTT...